Flowist (“we”, “us”, “our”) operates a Sales Readiness & Life Operations platform. This Privacy Policy explains what data we collect, why we collect it, and the sub-processors we rely on to deliver the service.
1. Data We Collect
Identity Data
When you sign in, we collect identifiers required to authenticate you and associate you with the correct workspace and project memberships. This includes:
- Google OAuth profile — name, email address, profile photo, and the unique Google account identifier.
- Email + Magic Link — the email address you submit and the one-time tokens used to verify it.
- Workspace metadata — your organization, role, and the contact records that link you to specific projects.
Interaction Data
We log specific interactions to support the operational integrity of the platform. This includes Deal Room presence tracking: when an authorized contact opens a Deal Room, we record the project, the contact identifier, and a timestamp. This visibility is strictly internal to the project owner’s workspace and is never surfaced back to the visiting client.
We additionally retain audit logs of mutations performed in the app (creates, updates, deletes) for security, debugging, and tenant isolation purposes.
2. How We Use Your Data
- To authenticate you and authorize project-scoped access.
- To render the projects, activities, and Deal Rooms you belong to.
- To inform project owners when invited contacts have engaged with their shared materials.
- To investigate security incidents and platform abuse.
We do not sell your data. We do not run advertising on the platform.
3. Sub-processors
Flowist relies on a small number of trusted sub-processors. By using Flowist you consent to their processing of the data described above.
- Supabase — managed Postgres, authentication, and file storage. Hosts identity, project, and interaction data.
- Google — identity provider for OAuth sign-in and related profile information.
- Lovable — application hosting and edge runtime that serves the Flowist application.
4. Data Retention
Identity and project data is retained for the lifetime of your workspace. Interaction logs are retained for as long as required to support the project owner’s operational visibility. You may request deletion at any time by contacting your workspace owner.
5. Your Rights
You may request access, correction, export, or deletion of your personal data. Requests are honored to the extent we can verify your identity and the absence of overriding legal obligations.
6. Contact
Questions about this policy can be sent to your project lead, who will route the request to the Flowist team.
See also our Terms of Service.